Security Guide for Newbies - Save the user
SECURITY.
You have 10 bitcoins.
Have you read them?
Bang!
Well now they're gone.
You screwed up, you were careless, you lost everything.
Because your security sucks. You didn't think long term and you were lazy. Laziness is for sloths, not for you.
Security and managing the security of any wallets in the crypto world is critical.
In this world there are no banks that can save you or help you, or people paid to help you if you lose passwords, private keys or if you are robbed.
Security is your duty and obligation. If you want to hold crypto, even in small amounts, you must follow some rules.
Remember that security and all the work you are doing here is to secure your coin. Security is not comfortable, is more like riding a motorcycle in the summer heat with a leather suit, that is not comfortable. But it is safe, and a comfortable service is unsafe. And we want SAFETY.
Let's go through an important, but not completely exhaustive, list of things you must do and not do.
We know that some things may be exaggerated, but you never know.
THINGS TO DO
Starting from scratch:
Back up of any private keys of each wallet. Private keys are also known as SEED.
The SEED is the set of words, which can be 12 or 24, that allows the wallet to be recovered if the wallet is lost or updated, depending on how the software works.
Always remember that whoever owns the seed, owns the coins.
Back up exchange access.
Always make a copy of the exchange access passwords and the e-mails that are used.
Of course protect the email password as well.
Back up the 2FAs.
Copy the QRs code of the 2FAs, make sure that you have a copy of any QR. Without 2FA you will not be able to access the exchanges.
Back up your phone for 2FAs.
If you have an old smartphone that you no longer use, you can use it to act as a Backup phone
Hide everything.
Needless to say, you can do as many back ups as you want, but if you leave something lying around, maybe written on some papers with the title "bitcoin wallet" and someone comes by and this person knows what to do....
And then remember where you hide your back up and what you put there.
Keep wallets updated.
Updates are done to improve services and to plug the holes that every system invariably has. Keeping wallets updated is a good and right thing.
Choose the right wallet.
Best to use one wallet per coin or per network type, example ERC20 or BSC
Multicoin and multi-network wallets can have larger security holes given the use of "exotic" coins that very often have only initial development and over time become insecure at the software level.
Use open source software.
Communities that make use of open source software in blockchain are communities that aspire to continuously improve the product. Best to rely on these people.
Check addresses after a copy - paste
There is a hacker attack that is called “Clipboard attack”. Your device has been infected with malware that recognizes the addresses of some coins and replaces the address you entered with another. So if you are withdrawing coins from an exchange, it replaces the address on your wallet with the one decided by the hacker when you go to copy paste. Always check that the address is correct. Dont be lazy.
Bookmark exchanges.
By bookmarking exchange addresses, beware of pishing attacks and clone websites created just to steal data from you. By using links in favorites you will be more sure that you are on the correct address.
Generate wallets only when you are alone.
You never know who is watching around you. Generating a bitcoin wallet in the middle of a square full of people is not very safe.
Know the Scams.
Follow our guide to learn how scams work and thus, not to get scammed yourself.
Maintain anonymity as much as possible.
There are crypto investor communities that are interesting to join, especially thanks to telegram. But we never know who is behind that screen . Be careful and study the situation before participating.
In case of robbery.
If they are unfortunately after your crypto wallets because you were unlucky or stupid, prepare in advance a wallet that is expendable with a low amount of money. But congruous with your big mouth. Idiot.
THINGS NOT TO DO
Lose back ups.
If you lose the papers or flash drives, you have lost access to the wallets.
If you misplace passwords or worse, misplace private keys, you can say goodbye to your coins.
This is the most frequent way to lose possession of coins, far more frequent than any scam.
Be careful where you write seeds
Do not write seed with a pencil but with a pen. Do not kick with a pen; a malicious person could retrieve your seed.
Then if use paper as temporary, destroy the paper with a shredder.
Do not use markers that could write part or all of the seed on underlying papers.
Do not use Clouds.
Do not put passwords, login information or seeds into any Cloud, even if you consider them hyper secure. Clouds can be hacked and this data leaked.
Pay attention to how you use your "notepad."
Do not lend your cell phone if you have a wallet in it.
Pure logic.
No photos with cell phones.
Do not take password or seed photos with your cell phone. Your cell phone may be hacked, you may forget to delete the photo, and you may lose your cell phone.
Buy a hardware wallet.
Do not have hardware wallet sent to your home.
Do not have hardware wallets sent to your home address, but use other addresses that cannot be traced back to you. Security flaws and data theft at Ledger have left all of the company's customer information at the mercy of hackers. It doesn't take long to realize that your data can be bought and used to harm you.
Don't leave clues.
Never leave behind papers, notes, or signs that might indicate your possession of cryptocurrency.
If you leave seed and password sheets around, your cleaning lady might betray you or sell you to someone. Or your wife might throw away some papers with random words written on.
Don't go around telling people that you have cryptocurrencies or how many you have. Stay in the shadows.
If someone should ask, answer that it is a subject you have studied but you have never owned anything, that you have never invested any money in them. There are people around who could harm you, who could threaten your family and your loved ones.
Do you really want to risk having your daughter killed only to fool around at the Club with those 4 assholes of your friends?
Safety rules for any exchange.
Always remember that the moment you signed up, you are vulnerable to be hacked.
You may have your password stolen. So use a password that is complex but different from the other services you usually use. A password that is the same as other sites can be a problem -
es Binance vs. small book seller. Understand that the investments in security between the two services are not comparable. It should be added that your email is easily traceable and this would give possible access to your funds if you have not protected yourself with another layer of protection such as 2FA
For this reason, always activate 2FA. But do not activate it from the email, Thats a bad choice.
Remember that the biggest flaw in any service is you, with your unintentionally careless behaviors.
We suggest making an email for exchanges, using privacy-oriented services such as Protonmail's.
For password creation you can think of something long consisting of several words yourself or using a program such as a password manager. Remember that a password created by the pc with numbers and letters is impossible to remember, while a password created with a phrase or set of words that make sense to you can be remembered more easily. We prefer a passphrase.
Again, for each exchange use a different password.
In case you use a password manager, you only have to remember the passphrase to access the service.
Never abandon coin on exchanges.
Because exchanges are a risk, coins that remain on the 'exchange can be stolen in the event of an attack. Do not leave coin to do anything on any exchange.
Coins can be left on some exchanges to create a passive income. But this is discussed in another article.
Another important point is that only coins should be left on exchanges to trade and that you are willing to lose in case of a security breach.
NFT - a complete Theorical Guide
NFT or Non-fungible Token, an acronym we are hearing more and more around the world.
But what is an NFT? What does fungible mean? How can it impact our lives?
A fungible something is a good that can be exchanged for another good of the same species. Money is the simplest example since I can exchange a 10 dollar bill for another 10 dollar bill without changing its economic function.
10 dollars is still 10 dollars
A non-fungible asset, on the other hand, is an asset that we can consider unique such as works of art, hand-built cars, etc.
Digital assets on blockchain fall under this last description of "scarcity" even when when in the digital world we can create thousands of the same images with the click of a mouse.
In fact, the creation of an NFT token is a technological process and not the creation of a product.
When you create an NFT you assign a distinctive serial number to something on the blockchain and there is no additional information about what that particular token is or serves.
NFT then can be applied to different product categories that may change our world.
This has created the stream of Crypto Art.
We are not art experts but we can define Crypto Art as a movement with a distinct aesthetic given the possibility of creating NFTs.
CryptoArt are rare digital artistic works associated with unique tokens that exist on the blockchain. This token allows the 'work of art” to be bought and sold as a real physical painting, and as with a real painting, there is only one. At least it should be that the concept of buying Crypto Art.
If we take a look inside an artistic NFT token, sold on the blockchain, we would find that the NFT token or tokens do not contain the artwork because it is too big. You can upload the images on the blockchain but it would be really too expensive. In fact, the token is linked to the art pieces, but these artistic pictures are uploaded somewhere else on the network.
The correct way to link a token to a piece of art is through a hash that can be used on a decentralized darknet, which is simply a network not indexed by search engines and therefore theoretically unreachable without knowing the exact input address.
Since the hash is a unique cryptographic key, it cannot be replicated and the hash becomes the identity of the file and one can verify if the two match.
With this hash, it does not matter where the work file is located.
For example, the hash of the most famous NFT work, namely the beeple work is this:
QmXkxpwAHCtDXbbZHUwqtFucG1RMS6T87vi1CdvadfL7qA
It does not matter where the work is posted, the current owner in case of sale will have the opportunity to produce the file that will match the hash.
For those who want a copy of the work in a known place, darknets can be used for this solution. The blockchain from decentralized transactions, a darknet from a decentralized file exchange service. The most famous is bit torrent.
The link to Beeple's work is this: ipfs://ipfs/QmPAg1mjxcEQPPtqsLoEcauVedaeMH81WXDPvPx3VC5zUz
The NFT token points to a metadata file that contains the 'original hash” within which all the information of the work is kept and in fact as in the blockchain, we are looking at a chain of hashes
So if we ask where the artwork is, the answer is that our NFT contains an hash that points to a darknet.
But not all NFTs point to a darknet. They may point to an address that is not decentralized. This could be a problem because we don't know how eternal that address is. The server owner could shut it down and goodbye to our work of art.
Now if you are wondering how to buy an Artistic NFT token, you should know that NFT tokens can be sold both on and off the blockchain.
In fact, Beeple's work was sold by Christies.
The change of ownership of the famous NFT was at 0 cost and the monetary transaction was through normal banking circuit, but this was a lucrative exception.
Contracts in NFTs follow the ERC721 standard, which allows them to be managed by other smart contracts
With any NFTs you do not have the actual ownership of the thing you have paid but you have the control of the ownership.
Control over the token but not over the artwork. This issue needs specific legislation and differ from country to country.
In fact I can buy an NFT representing a work of art, but if I buy an NFT representing a tweet on twitter, do I own the tweet? Or do I own the rights of the tweet?
What if I buy a meme? Who owns a meme?
More importantly, I could buy NFTs that have no connection to the actual author of the meme, having been created by people who "stole" his work. Who owns the evolution of the meme?
The major descriptions found around about NFTs describe what they pretend to be, but not what they really are.
An NFT is a token that represents a thing. It is not the work of art. It is a token that points to a work of art. It is a receipt of purchase of that artwork, only on blockchain.
If we go into the details of the steps of the creation of Beeple's NFT artwork
- Beeple created the artwork file
- It created the unique hash that identifies it
- Created the metadata file that includes the 'hash of the artwork
- Created the hash of the metadata file
- Uploaded both files to the ipfs decetralized darknet
- Created a token on the ethereum blockchain
- Christies creates an auction for the token
- The auction ends at $69 million in ethereum. However, there is no record of payment on blockchain
- Beeple transfers the token to the auction winner
BUT ultimately what was bought for $69 million.
A token. Which redirects you to an internet address.
So, now the owner of the token have the rights to transfer the token to someone else.
There is no mention of rights, copyright or even the artwork. Even beeple could create a copy of it with imperceptible changes and sell it with another token. Which I don't think he will do, but purely not to jettison his good name in the art world.
This leads us to understand the value of things based on an objective and subjective point of view. In fact, subjective value depends on preferences, beliefs, perceptions and our habits.
In case of collections, collectibles, subjective value is everything.
In fact, this kind of market has always existed, but hype is high with NFTs. Collectible figurines have always been sought after, and in the digitizing world, the NBA has tapped into NFTs by going on to create a market for tokens featuring the most beautiful clips of the best plays of basketball players.
In this article we talked about art and then moved on to collectibles. Technically any asset could be tokenized via NFTs given their representation on Blockchain, assuming legislation goes hand in hand with technology.
In fact, blockchain would solve many real-world issues because of its 6 key properties, namely :
Standardization, interoperability, tradeability, liquidity, immutability, programmability.
Let's go into the details of these key properties that we will need in the future:
Standardization:
Digital assets have existed since 'the beginning of the computer age on different platforms that are not compatible with each other. Think of the video games we would have liked to play....
Creating NFT tokens on the blockchain, any creators applies the same type of contract to all tokens creating uniformity of the standard
This allows NFT ownership, tranfers and access /control unified in one common system
If I buy 3 NFTs on 3 different platforms but with same standard these can or could interact with each other.
Where are NFTs?
The most developed blockchain today is ethereum.
There are 3 types of token standards most commonly used on the blockchain and they are ERC 721, ERC 998 and ERC 1155
ERC stands for Ethereum Request for Comments and is similar for BIP or Bitcoin Improvement Proposal.
ERC is basically how developers can propose improvements to the network. The numbers refer to the identities of the unique ones proposed
ERC 721 was used in 2018 and became famous with cryptokitties, a game on blockchain in which people could buy and sell kittens and each cat was an NFT token
The 721 standard allows the creation of tokens with different values and attributes, with various differences on the same smart contract and the token can be transferred into the same ecosystem
ERC 998 is a token that allows to create a bundle,to group separate, unequal ERC 721 tokens that can be bought and sold in one transaction.
Assume a car video game, where I will have 50 unique parts such as engine body etc. with which I will created my dream car. All of these parts will be ERC 721 tokens that I will sell in a single transaction since the all 50 NFT create my car in the video game.
ERC 1155 initially created for Enjin, an ecosystem on ethereum where applications can be created by developers. This standard allows the creation of both fungible and non-fungible tokens and their coexistence and interaction. Imagine again the car game we take example before, where all players start with one standard car and then as they progress, the users can buy cars that are only limited in number. Like the player starts with a Mazda Miata. but there are only 10 ferrari 250 GTOs in the game.
This is the standardization
Interoperability:
Since all tokens use the same standard, they run on the same platform. So anyone who creates an NFT of any kind, will be able to sell it a the marketplace of their choice or on all those on the enabled platform.
This pushes tradeability, it allows anyone to have access to a free and open marketplace and an operator can create, launch and sell an entire NFT into the “ecosystem”. This could revolutionize video games because anyone could participate in adding content to video games
Liquidity, a fast and efficient market leads to liquidity. Liquidity indicates a level of activity in the market, how many people are buying and how often in that market.
Immutability, a piece of data when confirmed and written on the blockchain is immutable, so this leads to the demonstration of authenticity of the digital asset as NFT and demonstrates its scarcity
Programmability. NFTs are totally programmable so they are extremely complex and creatable everything.
The sky is the limit with programming, developing and using the tokens.
Another one problems that we can find in platforms dedicated to artists and sales of their works is the forgery and double sale of their works.
In fact, it is very easy for a scammer to copy profiles and works of a famous artist on another selling platform, sell real but stolen tokens, and pocket the ethereum.
If we are interested in works of a certain cost and depth, the most useful thing to do is to check the artist's social and website and check that we are buying an NFT on a platform with a legitimate profile of him.
What has happened to the NFT market? Summer 2022
Like all markets affected by a huge rise in price and popularity, the market deflated, prices collapsed, and speculation came to a halt. Now there is the prospect of a clean sweep in what the next NFTs will be.
This is not necessarily a bad thing; on the contrary, this cleansing will bring out the real projects that bring value and are worth keeping in the portfolio.
In addition, NFTs will also begin to be used for other initiatives in the near future.
Updated 13/10/2022